Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
Bumps conformance/nightly/cosign/cosign from
cb60017
to285459e
.Commits
285459e
feat: Implement 'env' package to handle environment variables in cosign (#2322)d1c6336
Add CHANGELOG for v1.13.1 (#2349)e79cb5c
chore(deps): bump github.com/spf13/cobra from 1.5.0 to 1.6.0 (#2326)eba132f
chore(deps): bump github.com/go-openapi/runtime from 0.24.1 to 0.24.2 (#2347)2860144
chore(deps): bump google.golang.org/api from 0.98.0 to 0.99.0 (#2348)ef9cf9d
chore(deps): bump google-github-actions/setup-gcloud from 0.6.1 to 0.6.2 (#2344)fc83e43
chore(deps): bump google-github-actions/auth from 0.8.2 to 0.8.3 (#2343)e652561
chore(deps): bump google-github-actions/setup-gcloud from 0.6.0 to 0.6.1 (#2340)d637a3b
verify-blob-attestation: allow multiple subjects in in_toto attestation (#2341)a7ad7e7
Nits for #2337 (#2342)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase
.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot merge` will merge this PR after your CI passes on it - `@dependabot squash and merge` will squash and merge this PR after your CI passes on it - `@dependabot cancel merge` will cancel a previously requested merge and block automerging - `@dependabot reopen` will reopen this PR if it is closed - `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)